Description
Topaz Systems SigPlus Pro ActiveX Control 3.95版本，也可能在4.29之前的其他版本中存在设计错误漏洞。远程攻击者可以通过调用暴露的不安全(1)SetLogFilePath和(2)SigMessage方法创建带有任意内容的任意文件，并借此执行任意代码。
Topaz Systems SigPlus Pro ActiveX Control多个远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2011-0323
https://amaghelp.zendesk.com/hc/en-us/articles/6658780402452-Multiple-Vulnerabilities-for-SigPlus-Pro-ActiveX-Control-4-29
https://cve.imfht.com/detail/CVE-2011-0323
https://www.tenable.com/plugins/nessus/51895
https://exchange.xforce.ibmcloud.com/vulnerabilities/65114
https://www.cvedetails.com/version/1513370/Topazsystems-Sigplus-Pro-Activex-Control--.html